This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer File: 5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer (raw, json) Hash identifier: uqQmYrNRbh4a0EwA2cfGf7cY9z0Ph26GOy5z9/nPa7s= Subject key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 4B2A15CC2DD5C05B4C158D9B5CFD11A3146DD6EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:26:54 +0000 Certificate not after: Mon 18 Jan 2027 10:31:54 +0000 Subordinate resources: AS: 55996 IP: 43.229.48.0/22 IP: 103.20.32.0/22 IP: 103.40.174.0/23 IP: 103.45.168.0/22 IP: 103.45.224.0/22 IP: 103.61.188.0/22 IP: 103.197.0.0/22 IP: 103.248.100.0/22 IP: 123.108.88.0/23 IP: 2405:b300::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:2a:15:cc:2d:d5:c0:5b:4c:15:8d:9b:5c:fd:11:a3:14:6d:d6:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:26:54 2026 GMT Not After : Jan 18 10:31:54 2027 GMT Subject: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d4:4c:df:a5:75:ee:93:95:74:19:89:14:bb: 0e:41:cc:8d:11:fd:8d:56:8c:cf:64:57:5d:92:68: 4c:27:42:6b:ac:22:78:82:b2:40:5c:27:fe:32:52: e7:b2:27:cd:99:f6:ed:7c:73:f9:14:9a:32:86:f4: 3f:dc:08:d8:7e:45:62:d4:76:55:59:37:26:dc:23: 30:05:2f:85:cd:65:1a:05:2b:83:c6:c5:fb:fe:7e: 18:d0:1b:38:f5:e5:3a:db:65:a3:18:17:b4:83:ed: 4e:f4:fd:ae:63:56:b2:0b:24:08:85:48:91:40:d0: 87:98:c3:fb:ea:91:14:41:85:f6:d6:af:61:61:5f: 15:1c:be:82:0c:94:57:74:c9:49:ac:3f:45:ef:01: 39:52:6e:c4:3d:10:21:b2:49:88:b2:62:ac:27:74: 49:53:0f:ee:a7:9d:9b:3a:9e:e0:cc:9b:bd:d6:5a: c3:94:25:c9:59:bf:30:27:bc:ae:34:9d:88:7c:f7: b3:6a:47:25:c7:20:28:ad:3d:8a:9c:f6:b1:03:83: 61:4d:34:64:36:f8:12:ee:84:cf:1e:b5:8b:da:f7: b6:37:e2:0f:40:8b:21:d1:48:76:1a:4b:c2:7f:cb: b3:f7:a2:02:0a:84:3e:9b:5f:50:0d:17:27:12:a1: de:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.229.48.0/22 103.20.32.0/22 103.40.174.0/23 103.45.168.0/22 103.45.224.0/22 103.61.188.0/22 103.197.0.0/22 103.248.100.0/22 123.108.88.0/23 IPv6: 2405:b300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55996 Signature Algorithm: sha256WithRSAEncryption 8e:af:a4:e6:b1:66:70:84:7c:56:f0:ff:33:34:8b:6c:b7:69: c5:46:d6:12:3e:1b:c6:10:64:20:45:9d:07:15:17:57:84:b8: 98:08:dd:6d:db:60:ce:f4:e1:cf:55:bc:90:c3:5d:62:15:ee: dc:0c:ba:7e:84:4b:5b:e7:bc:92:65:a1:43:0a:4d:69:ae:39: 8a:f0:f8:0f:8f:15:0f:cb:5e:69:50:93:4a:b3:ff:6d:9f:4f: ee:06:22:77:f3:7c:c4:14:ad:c5:8c:68:1d:66:e7:5d:51:98: 3b:e7:de:b4:d7:32:59:e6:dd:17:dd:dc:bc:1c:0d:22:8e:e4: 17:66:92:3f:77:e2:26:e5:c4:5e:28:c8:a2:c9:e5:c3:f1:42: 47:43:d8:ac:72:e8:09:fe:f4:cf:c7:da:f1:3a:f1:f5:b2:5a: 9e:a5:01:98:73:85:30:0b:94:b8:0a:42:d2:0e:b9:64:59:3a: 9e:ab:b6:1e:98:2a:0b:3d:c4:38:60:1b:a7:5d:82:e4:b6:a8: c5:66:35:7d:eb:9b:72:17:c6:0c:79:98:7b:a4:35:53:76:92: d0:0c:fd:35:00:ca:3d:4c:5f:a3:ad:0c:d4:c9:31:06:5e:70: b4:59:f5:b9:39:c3:09:54:bf:86:7d:9d:1e:fd:54:b0:55:e3: be:ac:78:78 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgIUSyoVzC3VwFtMFY2bXP0RoxRt1u8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMjY1NFoX DTI3MDExODEwMzE1NFowMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFD Mzc2QjdCQ0NGM0U4M0FCMjMzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANXUTN+lde6TlXQZiRS7DkHMjRH9jVaMz2RXXZJoTCdCa6wieIKyQFwn/jJS 57InzZn27Xxz+RSaMob0P9wI2H5FYtR2VVk3JtwjMAUvhc1lGgUrg8bF+/5+GNAb OPXlOttloxgXtIPtTvT9rmNWsgskCIVIkUDQh5jD++qRFEGF9tavYWFfFRy+ggyU V3TJSaw/Re8BOVJuxD0QIbJJiLJirCd0SVMP7qedmzqe4MybvdZaw5QlyVm/MCe8 rjSdiHz3s2pHJccgKK09ipz2sQODYU00ZDb4Eu6Ezx61i9r3tjfiD0CLIdFIdhpL wn/Ls/eiAgqEPptfUA0XJxKh3oMCAwEAAaOCAvUwggLxMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF34CG0++hdkh6HDdre8zz6DqyM5MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NzI0MTk0NzYwMjk0NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjAyOTQ1 LzAvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXgYIKwYBBQUH AQcBAf8ETzBNMDwEAgABMDYDBAIr5TADBAJnFCADBAFnKK4DBAJnLagDBAJnLeAD BAJnPbwDBAJnxQADBAJn+GQDBAF7bFgwDQQCAAIwBwMFACQFswAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANq8MA0GCSqGSIb3DQEBCwUAA4IBAQCOr6TmsWZwhHxW 8P8zNItst2nFRtYSPhvGEGQgRZ0HFRdXhLiYCN1t22DO9OHPVbyQw11iFe7cDLp+ hEtb57ySZaFDCk1prjmK8PgPjxUPy15pUJNKs/9tn0/uBiJ383zEFK3FjGgdZudd UZg759601zJZ5t0X3dy8HA0ijuQXZpI/d+Im5cReKMiiyeXD8UJHQ9iscugJ/vTP x9rxOvH1slqepQGYc4UwC5S4CkLSDrlkWTqeq7YemCoLPcQ4YBunXYLktqjFZjV9 65tyF8YMeZh7pDVTdpLQDP01AMo9TF+jrQzUyTEGXnC0WfW5OcMJVL+GfZ0e/VSw VeO+rHh4 -----END CERTIFICATE-----Generated at Sun Jan 25 12:46:18 2026 by rpki-client